Every CVE Search/ Get API key

CVE-2018-1116

A flaw was found in polkit before version 0.116. The implementation of the...

4.7 MediumFix available

A flaw was found in polkit before version 0.116. The implementation of the polkit_backend_interactive_authority_check_authorization function in polkitd allows to test for authentication and trigger authentication of unrelated processes owned by other users. This may result in a local DoS and information disclosure.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
Low

Exploit likelihood

1.20%Down 0.1 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 4.7

A flaw was found in polkit before version 0.116. The implementation of the polkit_backend_interactive_authority_check_authorization function in polkitd allows to test for authentication and trigger authentication of unrelated processes owned by other users. This may result in a local DoS and information disclosure.

Record
CVE-2018-1116
CVSS 3.0
4.7 MediumCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Weakness
CWE-285
Updated
2026-11-02
EUVDEUVD-2018-11760 4.7

A flaw was found in polkit before version 0.116. The implementation of the polkit_backend_interactive_authority_check_authorization function in polkitd allows to test for authentication and trigger authentication of unrelated processes owned by other users. This may result in a local DoS and information disclosure.

Record
EUVD-2018-11760
CVSS 3.0
4.7 MediumCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-03
GitHub AdvisoriesGHSA-hjrh-286v-8qr4 4.4

A flaw was found in polkit before version 0.116. The implementation of the...

A flaw was found in polkit before version 0.116. The implementation of the polkit_backend_interactive_authority_check_authorization function in polkitd allows to test for authentication and trigger authentication of unrelated processes owned by other users. This may result in a local DoS and information disclosure.

Record
GHSA-hjrh-286v-8qr4
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Weakness
CWE-862
Updated
2026-11-02
NVD 4.4

A flaw was found in polkit before version 0.116. The implementation of the polkit_backend_interactive_authority_check_authorization function in polkitd allows to test for authentication and trigger authentication of unrelated processes owned by other users. This may result in a local DoS and information disclosure.

Record
CVE-2018-1116
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
CVSS 3.0
4.7 MediumCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
CVSS 2.0
3.6 LowAV:L/AC:L/Au:N/C:P/I:N/A:P
Weakness
CWE-285, CWE-862
Updated
2026-11-02
OSV 4.4

A flaw was found in polkit before version 0.116. The implementation of the polkit_backend_interactive_authority_check_authorization function in polkitd allows to test for authentication and trigger authentication of unrelated processes owned by other users. This may result in a local DoS and information disclosure.

Record
CVE-2018-1116
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Updated
2026-11-02
OSVDEBIAN-CVE-2018-1116 4.4

A flaw was found in polkit before version 0.116. The implementation of the polkit_backend_interactive_authority_check_authorization function in polkitd allows to test for authentication and trigger authentication of unrelated processes owned by other users. This may result in a local DoS and information disclosure.

Record
DEBIAN-CVE-2018-1116
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Updated
2026-11-02
Show 8 moreShow less
OSVRHSA-2020:1135 4.4

Red Hat Security Advisory: polkit security and bug fix update

Record
RHSA-2020:1135
CVSS 3.0
4.4 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2018-1116 4.4

A flaw was found in polkit before version 0.116. The implementation of the polkit_backend_interactive_authority_check_authorization function in polkitd allows to test for authentication and trigger authentication of unrelated processes owned by other users. This may result in a local DoS and information disclosure.

Record
UBUNTU-CVE-2018-1116
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
CVSS 3.0
4.7 MediumCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
CVSS 3.0
7.1 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVCLSA-2026-1780069518 No score

polkit: Fix of CVE-2018-1116

  • CVE-2018-1116: polkit trusts client-supplied UID in CheckAuthorization, allowing a local attacker to spoof or DoS the authentication-agent dialog of unrelated processes.
Record
CLSA-2026-1780069518
Updated
2026-11-02
OSVCLSA-2026-1780070303 No score

polkit: Fix of CVE-2018-1116

  • CVE-2018-1116: polkit trusts client-supplied UID in CheckAuthorization, allowing a local attacker to spoof or DoS the authentication-agent dialog of unrelated processes.
Record
CLSA-2026-1780070303
Updated
2026-11-02
OSVopenSUSE-SU-2024:11180-1 No score

libpolkit0-0.118-7.2 on GA media

These are all security issues fixed in the libpolkit0-0.118-7.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11180-1
Updated
2026-11-02
OSVSUSE-SU-2018:2163-1 No score

Security update for polkit

This update for polkit fixes the following issues:

Security issue fixed:

  • CVE-2018-1116: Fix uid comparison lacking in polkit_backend_interactive_authority_check_authorization (bsc#1099031).
Record
SUSE-SU-2018:2163-1
Updated
2026-11-02
OSVSUSE-SU-2018:2165-1 No score

Security update for polkit

This update for polkit fixes the following issues:

Security issue fixed:

  • CVE-2018-1116: Fix uid comparison lacking in polkit_backend_interactive_authority_check_authorization (bsc#1099031).
Record
SUSE-SU-2018:2165-1
Updated
2026-11-02
OSVUSN-3717-1 No score

policykit-1 vulnerabilities

Tavis Ormandy discovered that PolicyKit incorrectly handled certain invalid object paths. A local attacker could possibly use this issue to cause PolicyKit to crash, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS. (CVE-2015-3218)

It was discovered that PolicyKit incorrectly handled certain duplicate action IDs. A local attacker could use this issue to cause PolicyKit to crash, resulting in a denial of service, or possibly escalate privileges. This issue only affected Ubuntu 14.04 LTS. (CVE-2015-3255)

Tavis Ormandy discovered that PolicyKit incorrectly handled duplicate cookie values. A local attacker could use this issue to cause PolicyKit to crash, resulting in a denial of service, or possibly escalate privileges. This issue only affected Ubuntu 14.04 LTS. (CVE-2015-4625)

Matthias Gerstner discovered that PolicyKit incorrectly checked users. A local attacker could possibly use this issue to cause authentication dialogs to show up for other users, leading to a denial of service or an information leak. (CVE-2018-1116)

Record
USN-3717-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
polkit
TuxCare:OracleLinux:6
 before 0.96-11.el6_10.1.tuxcare.els2
0.96-11.el6_10.1.tuxcare.els2
polkit-desktop-policy
TuxCare:OracleLinux:6
 before 0.96-11.el6_10.1.tuxcare.els2
0.96-11.el6_10.1.tuxcare.els2
polkit-devel
TuxCare:OracleLinux:6
 before 0.96-11.el6_10.1.tuxcare.els2
0.96-11.el6_10.1.tuxcare.els2
polkit-docs
TuxCare:OracleLinux:6
 before 0.96-11.el6_10.1.tuxcare.els2
0.96-11.el6_10.1.tuxcare.els2
polkit
TuxCare:CentOS:6
 before 0.96-11.el6_10.1.tuxcare.els2
0.96-11.el6_10.1.tuxcare.els2
polkit-desktop-policy
TuxCare:CentOS:6
 before 0.96-11.el6_10.1.tuxcare.els2
0.96-11.el6_10.1.tuxcare.els2
polkit-devel
TuxCare:CentOS:6
 before 0.96-11.el6_10.1.tuxcare.els2
0.96-11.el6_10.1.tuxcare.els2
polkit-docs
TuxCare:CentOS:6
 before 0.96-11.el6_10.1.tuxcare.els2
0.96-11.el6_10.1.tuxcare.els2
policykit-1
Debian:12
 before 0.105-21
0.105-21
policykit-1
Debian:13
 before 0.105-21
0.105-21
Show 31 moreShow less
Affected packages
PackageAffectedFixed
policykit-1
Debian:14
 before 0.105-21
0.105-21
policykit-1
Debian:8
 before 0.105-15~deb8u3, plus listed versions
0.105-100.105-110.105-120.105-130.105-14
Show 5 moreShow less
0.105-14.10.105-15~deb8u10.105-15~deb8u20.105-80.105-9
0.105-15~deb8u3
polkit
Red Hat:enterprise_linux:7::client
 before 0:0.112-26.el7
0:0.112-26.el7
polkit-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:0.112-26.el7
0:0.112-26.el7
polkit-devel
Red Hat:enterprise_linux:7::client
 before 0:0.112-26.el7
0:0.112-26.el7
polkit-docs
Red Hat:enterprise_linux:7::client
 before 0:0.112-26.el7
0:0.112-26.el7
polkit
Red Hat:enterprise_linux:7::computenode
 before 0:0.112-26.el7
0:0.112-26.el7
polkit-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:0.112-26.el7
0:0.112-26.el7
polkit-devel
Red Hat:enterprise_linux:7::computenode
 before 0:0.112-26.el7
0:0.112-26.el7
polkit-docs
Red Hat:enterprise_linux:7::computenode
 before 0:0.112-26.el7
0:0.112-26.el7
polkit
Red Hat:enterprise_linux:7::server
 before 0:0.112-26.el7
0:0.112-26.el7
polkit-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:0.112-26.el7
0:0.112-26.el7
polkit-devel
Red Hat:enterprise_linux:7::server
 before 0:0.112-26.el7
0:0.112-26.el7
polkit-docs
Red Hat:enterprise_linux:7::server
 before 0:0.112-26.el7
0:0.112-26.el7
polkit
Red Hat:enterprise_linux:7::workstation
 before 0:0.112-26.el7
0:0.112-26.el7
polkit-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:0.112-26.el7
0:0.112-26.el7
polkit-devel
Red Hat:enterprise_linux:7::workstation
 before 0:0.112-26.el7
0:0.112-26.el7
polkit-docs
Red Hat:enterprise_linux:7::workstation
 before 0:0.112-26.el7
0:0.112-26.el7
polkit
SUSE:Linux Enterprise Desktop 12 SP3
 before 0.113-5.9.1
0.113-5.9.1
polkit
SUSE:Linux Enterprise Software Development Kit 12 SP3
 before 0.113-5.9.1
0.113-5.9.1
polkit
SUSE:Linux Enterprise Server 12 SP3
 before 0.113-5.9.1
0.113-5.9.1
polkit
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 0.113-5.9.1
0.113-5.9.1
polkit
SUSE:Linux Enterprise Workstation Extension 12 SP3
 before 0.113-5.9.1
0.113-5.9.1
polkit
SUSE:Linux Enterprise Module for Basesystem 15
 before 0.114-3.3.1
0.114-3.3.1
policykit-1
Ubuntu:14.04:LTS
 before 0.105-4ubuntu3.14.04.2, plus listed versions
0.105-3ubuntu30.105-4ubuntu10.105-4ubuntu20.105-4ubuntu2.14.04.10.105-4ubuntu3.14.04.1
0.105-4ubuntu3.14.04.2
policykit-1
Ubuntu:16.04:LTS
 before 0.105-14.1ubuntu0.1, plus listed versions
0.105-11ubuntu20.105-130.105-13ubuntu10.105-140.105-14.1
0.105-14.1ubuntu0.1
policykit-1
Ubuntu:18.04:LTS
 before 0.105-20ubuntu0.18.04.1, plus listed versions
0.105-180.105-20
0.105-20ubuntu0.18.04.1
policykit-1
Ubuntu:14.04:LTS
From an advisory covering 4 CVEs
 before 0.105-4ubuntu3.14.04.2, plus listed versions
0.105-3ubuntu30.105-4ubuntu10.105-4ubuntu20.105-4ubuntu2.14.04.10.105-4ubuntu3.14.04.1
0.105-4ubuntu3.14.04.2
policykit-1
Ubuntu:16.04:LTS
From an advisory covering 4 CVEs
 before 0.105-14.1ubuntu0.1, plus listed versions
0.105-11ubuntu20.105-130.105-13ubuntu10.105-140.105-14.1
0.105-14.1ubuntu0.1
policykit-1
Ubuntu:18.04:LTS
From an advisory covering 4 CVEs
 before 0.105-20ubuntu0.18.04.1, plus listed versions
0.105-180.105-20
0.105-20ubuntu0.18.04.1
polkit
openSUSE:Tumbleweed
From an advisory covering 4 CVEs
 before 0.118-7.2
0.118-7.2

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-1116 is a medium vulnerability (CVSS 4.7) in [unknown] Polkit, published July 10, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.20%, the 68th percentile. Fixed in polkit 0.96-11.el6_10.1.tuxcare.els2.

References

Show 26 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open